What Is Claimed Is: 

1 LA method for verifying type safety of an application snapshot, the 

2 application snapshot including a\state of an executing program that is moved from 

3 a first computing device to a second computing device across a network in order 

4 to continue execution on the second computing device, the method comprising: 

5 receiving the application snapshot from the first computing device on the 

6 second computing device, wherein pe application snapshot includes a 

7 subprogram, an operand stack, and a point of execution; 

8 examining the application snapshot to identify the subprogram and the 

9 point of execution within the subprogram; 

1 0 examining the subprogram to petermine an expected structure of the 

1 1 operand stack at the point of execution; 

12 validating that the state of the application snapshot on the second 

1 3 computing device is consistent with th^ expected structure of the operand stack; 

14 and 

1 5 if the state of the application snapshot is validated as consistent with the 

16 expected structure of the operand stack, resuming execution of the application 

1 7 snapshot on the second computing device! 



1 2. The method of claim 1 5 wherein examining the subprogram to 

2 determine the expected structure of the operand stack at the point of execution 

3 involves examining the subprogram with a cofle verifier, wherein the code verifier 

4 ensures that: 

5 the subprogram does not cause the operand stack to overflow and 

6 underflow; 

7 a use of a local variable does not violate tj^pe safety; and 
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8 an argument of ah instruction is of an expected type. 

1 3. The method of claim 1, wherein the operand stack contains at least 

2 one local variable, at least We argument that is passed as a parameter to the 

3 subprogram, and an offset to the point of execution within the subprogram. 

1 4. The method of claim 2, wherein the expected structure of the 

2 operand stack includes a collective size of entries and the types of entries expected 

3 on the operand stack at the point of execution within the subprogram. 

1 5. The method of claim 1, further comprising restoring the state of an 

2 object within the application snapshot on the second computing device by 

3 changing a pointer from an addresl of the object on the first computing device to 

4 an address of the object on the second computing device. 

1 6. The method of claim 4 wherein validating that the state of the 

2 application snapshot on the second computing device is consistent with the 

3 expected structure of the operand stack involves ensuring that the collective size 

4 of entries and the types of entries on the bperand stack agree with the collective 

5 size of entries and the types of entries expected on the operand stack. 

1 7. The method of claim 1 , wherein resuming execution of the 

2 application snapshot involves restarting the subprogram at the point of execution 

3 within the second computing device. \ 

1 8. A computer-readable storage meqium storing instructions that 

2 when executed by a computer causes the computer to perform a method for 
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3 verifying type safety of an application snapshot, the application snapshot 

4 including a state of an toecuting program that is moved from a first computing 

5 device to a second computing device across a network in order to continue 

6 execution on the second computing device, the method comprising: 

J 7 receiving the application snapshot from the first computing device on the 

8 second computing device, Wherein the application snapshot includes a 

9 subprogram, an operand stack, and a point of execution; 

10 examining the application snapshot to identify the subprogram and the 

1 1 point of execution within theWbprogram; 

12 examining the subprogram to determine an expected structure of the 

1 3 operand stack at the point of execution; 

14 validating that the state of the application snapshot on the second 

1 5 computing device is consistent with the expected structure of the operand stack; 

16 and \ 

1 7 if the state of the application snapshot is validated as consistent with the 

1 8 expected structure of the operand stack, resuming execution of the application 

1 9 snapshot on the second computing device. 

1 9. The computer-readable storage medium of claim 8, wherein 

2 examining the subprogram to determine Vhe expected structure of the operand 

3 stack at the point of execution involves examining the subprogram with a code 

4 verifier, wherein the code verifier ensures that: 

5 the subprogram does not cause the operand stack to overflow and 

6 underflow; \ 

7 a use of a local variable does not violate type safety; and 

8 an argument of an instruction is of an expected type. 
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1 1 0. The computeV-readable storage medium of claim 8, wherein the 

2 operand stack contains at least one local variable, at least one argument that is 

3 passed as a parameter to the subprogram, and an offset to the point of execution 

4 within the subprogram. \ 

1 11. The computer-readable storage medium of claim 9, wherein the 

2 expected structure of the operand Stack includes a collective size of entries and the 

3 types of entries expected on the operand stack at the point of execution within the 

4 subprogram. \ 

1 12. The computer-readable storage medium of claim 8, further 

2 comprising restoring the state of an object within the application snapshot on the 

3 second computing device by changing a pointer from an address of the object on 

4 the first computing device to an address of the object on the second computing 

5 device. \ 

1 13. The computer-readable storage medium of claim 1 1 , wherein 

2 validating that the state of the application snapshot on the second computing 

3 device is consistent with the expected structure of the operand stack involves 

4 ensuring that the collective size of entries and the types of entries on the operand 

5 stack agree with the collective size of entries and the types of entries expected on 

6 the operand stack. \ 

1 14. The computer-readable storage medium of claim 8, wherein 

2 resuming execution of the application snapshot involves restarting the subprogram 

3 at the point of execution within the second computing\ievice. 
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1 1 5. An apparatus that facilitates verifying type safety of an application 

2 snapshot, the application silapshot including a state of an executing program that 

3 is moved from a first computing device to a second computing device across a 

4 network in order to continue execution on the second computing device, 

5 comprising: \ 

6 a receiving mechanismtthat is configured to receive the application 

7 snapshot from the first computing device on the second computing device, 

8 wherein the application snapshot includes a subprogram, an operand stack, and a 

9 point of execution; \ 

1 0 an examination mechanism that is configured to examine the application 

1 1 snapshot to identify the subprogram and the point of execution within the 

12 subprogram wherein, the examination mechanism is configured to also examine 

1 3 the subprogram to determine an expected structure of the operand stack at the 

14 point of execution; \ 

1 5 a validation mechanism that is configured to validate that the state of the 

1 6 application snapshot on the second colnputing device is consistent with the 

1 7 expected structure of the operand stack; and 

1 8 an execution mechanism that is configured to resume execution of the 

1 9 application snapshot on the second computing device if the state of the application 

20 snapshot is validated as consistent with the expected structure of the operand 

21 stack. \ 

1 16. The apparatus of claim 15, wherein the examination mechanism 

2 includes a code verifier, wherein the code verifier is configured to ensure that: 

3 the subprogram does not cause the operand stack to overflow and 

4 underflow; \ 

5 a use of a local variable does not violate type safety; and 

16 \ 

Attorney Docket No. SUN-P5075-RSH Ifaventor(s): Czajkowski, et al. 

ARP\\PORSCHE\MY DOCUMENTS\SUN MICROS YSTEMS\SUN-P5075-r4i\SUN-P5075-RSH APPLICATION.DOC 



6 an argument of^instruction is of an expected type. 

1 1 7. The apparatus of claim 15, wherein the operand stack contains at 

2 least one local variable, at least one argument that is passed as a parameter to the 

3 subprogram, and an offset t6 the point of execution within the subprogram. 

1 18. The apparatus lof claim 1 6, wherein the expected structure of the 

2 operand stack includes a collective size of entries and the types of entries expected 

3 on the operand stack at the point of execution within the subprogram. 

1 1 9. The apparatus ofi claim 1 5, further comprising an object restoring 

2 mechanism that is configured to restore the state of an object within the 

3 application snapshot on the second computing device by changing a pointer from 

4 an address of the object on the fivk computing device to an address of the object 

5 on the second computing device. 1 

1 20. The apparatus of claim 1 8, wherein the validation mechanism is 

2 configured to ensure that the collective size of entries and the types of entries on 

3 the operand stack agree with the collective size of entries and the types of entries 

4 expected on the operand stack. \ 

1 21. The apparatus of claim 115, wherein in resuming execution of the 

2 application snapshot, the execution mechanism is configured to restart the 

3 subprogram at the point of execution wiuhin the second computing device. 
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